Skip to content
Open-Source Registry

cargo / agy-bridge

agy-bridge 0.16.4

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
328
operations
44K
packages
222
compiler runs
276
connections
2
job time
2m 09s
capture
575 KB
records
80K
bytes / record
7.2

Async Rust bridge and native runtime for the Google Antigravity SDK

Build behaviourits build script reached files.pythonhosted.orgundeclared fetchfetched outside crates.iocompiled C/C++

610 downloads · Apache-2.0 OR MIT · source agentantigravitygeminillmpyo3 View on crates.io

Graph

egress · medium · in libagy_bridge.rlib
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached files.pythonhosted.org
    agy-bridge 0.16.4 › files.pythonhosted.org:443
    medium

Detection

mediumwitnessed

Build script reached files.pythonhosted.org

Unexpected network connection

Subject
agy-bridge 0.16.4
Destination
files.pythonhosted.org:443
Reaches
Jobs
build-test
Rule
egress · agy-bridge

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to files.pythonhosted.org:443, opened by build_script_build-ff1e57faaac6c0da

    subject files.pythonhosted.org:443

    by /home/runner/work/agy-bridge/agy-bridge/target/release/build/agy-bridge-ff1e57faaac6c0da/build-script-build

  2. What a build script's fetch becamesupport

    3 files came down; nothing the build compiled, linked or ran

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/agy-bridge/agy-bridge/target/release/build/agy-bridge-ff1e57faaac6c0da/build_script_build-ff1e57faaac6c0da

In libagy_bridge.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/agy-bridge/agy-bridge/target/release/build/agy-bridge-ff1e57faaac6c0da/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2478
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2478
  3. build-script-build/home/runner/work/agy-bridge/agy-bridge/target/release/build/agy-bridge-ff1e57faaac6c0da/build-script-build5109

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

2 peers
  • files.pythonhosted.org:443 agy-bridge's own build code · build_script_build-ff1e57faaac6c0da (agy-bridge) · Fastly, Inc. · 3 files undeclared
  • static.crates.io:8080 the package manager · cargo (agy-bridge) via crates.io · 11,949 files · went into an output ecosystem
Dependencies230Build behaviour
adler22.0.1
aho-corasick1.1.5
allocator-api20.2.21
anyhow1.0.104build script
autocfg1.5.1
base640.22.1
base640.23.1
bitflags1.3.2
bitflags2.13.2
block-buffer0.12.1
bumpalo3.20.3
byteorder1.5.0
bytes1.12.1
cc1.4.7
cfg-if1.0.5
cfg_aliases0.2.2
chacha200.10.2
chrono0.4.45
ciborium0.2.2
ciborium-io0.2.2
ciborium-ll0.2.2
const-oid0.10.2
convert_case0.11.0
cookie0.18.2build script, not run
cookie_store0.22.1
cpufeatures0.3.1
crc32fast1.5.2build script
crunchy0.2.4build script, not run
crypto-common0.2.2
data-encoding2.11.1
deranged0.5.8
digest0.11.3
displaydoc0.2.7proc macro
document-features0.2.12proc macro
dyn-clone1.0.20
either1.18.0
equivalent1.0.2
errno0.3.14
fast_rands0.16.1
fastrand2.5.0
find-msvc-tools0.1.13
fixedbitset0.5.7
flate21.1.10
flexbuffers25.12.19
foldhash0.1.5
foldhash0.2.0
form_urlencoded1.2.2
futures0.3.34
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-io0.3.34
futures-macro0.3.34proc macro
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
getrandom0.4.3build script
half2.7.1
hashbrown0.15.5
hashbrown0.17.1
heck0.5.0
http1.5.0
httparse1.10.1build script
hybrid-array0.4.15
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script, not run
icu_properties2.3.0
icu_properties_data2.3.0build script, not run
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.2
itertools0.14.0
itoa1.0.18
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
litemap0.8.3
litrs1.0.0
llm-tool0.10.3
llm-tool-macros0.10.3proc macro
log0.4.34
matchers0.2.0
md-tmpl0.10.5
md-tmpl-core0.10.5
md-tmpl-macros0.10.5proc macro
memchr2.8.3
miniz_oxide0.9.1
mio1.2.3
multimap0.10.1
nix0.31.3build script, not run
nu-ansi-term0.50.3
num-conv0.2.2
num-traits0.2.19build script
num_enum0.5.11
num_enum_derive0.5.11proc macro
once_cell1.21.4
pbjson0.9.0
pbjson-build0.9.0
pbjson-types0.9.0build script
percent-encoding2.3.2
petgraph0.8.3
pin-project-lite0.2.17
potential_utf0.1.6
powerfmt0.2.0
prettyplease0.2.37build script
proc-macro-crate1.3.1
proc-macro21.0.107build script
prost0.14.4
prost-build0.14.4
prost-derive0.14.4proc macro
prost-types0.14.4
protoc-bin-vendored3.3.0
protoc-bin-vendored-linux-aarch_643.3.0
protoc-bin-vendored-linux-ppcle_643.3.0
protoc-bin-vendored-linux-s390_643.3.0
protoc-bin-vendored-linux-x86_323.3.0
protoc-bin-vendored-linux-x86_643.3.0
protoc-bin-vendored-macos-aarch_643.3.0
protoc-bin-vendored-macos-x86_643.3.0
protoc-bin-vendored-win323.3.0
quote1.0.47build script
r-efi6.0.0
rand0.10.3
rand_core0.10.1
ref-cast1.0.27build script
ref-cast-impl1.0.27proc macro
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rustix1.1.5build script
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build script, not runproc macro
schemars1.2.2
schemars_derive1.2.2proc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_derive_internals0.30.0
serde_json1.0.151build script
sha10.11.0
sharded-slab0.1.7
shlex2.0.1
signal-hook-registry1.4.8
simd-adler320.3.10
slab0.4.12
smallvec1.16.1
socket20.6.5
spin0.12.3
stable_deref_trait1.2.1
subtle2.6.1
syn1.0.109build script
syn2.0.119
syn3.0.6
synstructure0.14.0
tempfile3.27.0
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
thread_local1.1.10
time0.3.55
time-core0.1.9
time-macros0.2.32proc macro
tinystr0.8.4
tokio1.53.1
tokio-macros2.7.2proc macro
tokio-stream0.1.19
tokio-tungstenite0.30.0
toml_datetime0.6.11
toml_edit0.19.15
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
tungstenite0.30.0
typed-builder0.23.2
typed-builder-macro0.23.2proc macro
typed-path0.12.3
typenum1.20.1
unicode-ident1.0.26
unicode-segmentation1.13.3
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
valuable0.1.1build script, not run
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow0.5.40
writeable0.6.4
yoke0.8.3
yoke-derive0.8.3proc macro
zerocopy0.8.57build script
zerocopy-derive0.8.57proc macro
zerofrom0.1.8
zerofrom-derive0.1.8proc macro
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zip9.0.4
zlib-rs0.6.8
zmij1.0.23build script
zopfli0.8.3
Versions27RiskVulnsPublished
0.16.3not analyzed2026-09-22
0.16.2not analyzed2026-09-14
0.16.1not analyzed2026-09-09
0.16.0not analyzed2026-09-08
0.11.0not analyzed2026-08-18
0.10.0not analyzed2026-08-16
0.9.4not analyzed2026-08-13
0.9.2not analyzed2026-07-22
0.9.1not analyzed2026-07-16
0.9.0not analyzed2026-07-15
0.8.2not analyzed2026-07-15
0.8.1not analyzed2026-07-15
0.8.0not analyzed2026-07-15
0.6.2not analyzed2026-07-10
0.6.1not analyzed2026-07-10
0.6.0not analyzed2026-07-10
0.5.2not analyzed2026-07-07
0.5.0not analyzed2026-07-03
0.4.2not analyzed2026-07-01
0.4.1not analyzed2026-06-30
0.3.1not analyzed2026-06-30
0.2.1not analyzed2026-06-25
0.1.4not analyzed2026-06-16
0.1.2not analyzed2026-06-11
0.1.1not analyzed2026-06-04
0.1.0not analyzed2026-06-02
0.16.4mediumnone

Raw data

capture
575 KB
records
80,438
bytes per record
7.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run a007c0c9-c180-4669-a0de-f315a12a3234

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2